Bug 1233966

Summary: [RFE] wireshark support for reading from stdin/pipes.
Product: Red Hat Enterprise Linux 7 Reporter: Martin Žember <mzember>
Component: wiresharkAssignee: Martin Sehnoutka <msehnout>
Status: CLOSED ERRATA QA Contact: Karel Srot <ksrot>
Severity: high Docs Contact:
Priority: urgent    
Version: 7.2CC: cww, ebenes, jaster, ksrot, rpiddapa, tsmetana
Target Milestone: rcKeywords: FutureFeature, Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: wireshark-1.10.14-9.el7 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 1104210 Environment:
Last Closed: 2016-11-04 08:33:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1203710    

Description Martin Žember 2015-06-19 21:04:19 UTC
+++ This bug was initially created as a clone of Bug #1104210 +++

Consider adding support of stdin/pipes to RHEL-7. There is a patch but for another branch of wireshark code. There is a test in QE that manifests the lack of this feature:

:: [   FAIL   ] :: Command 'tshark -c 20000 -r <(xzcat wireshark-large.pcapng.xz) 2>error_log | sed -n '20000p' >stdout_log' (Expected 0, got 2)
:: [  BEGIN   ] :: Running 'cat error_log'
Running as user "root" and group "root". This could be dangerous.
tshark: The file "/dev/fd/63" appears to be damaged or corrupt.
(pcapng_read_block: total block lengths (first 264 and second 17301504) don't match)

--- Additional comment from  on 2014-04-17 19:01:43 EDT ---

Hi,

wireshark support for reading from stdin/pipes. This would increase performance of some of our internal production tools significantly. 

Peter Hatina has already prepared a patch addressing this issue: 

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9710#c5 

-mpathan

Comment 11 Karel Srot 2016-07-29 07:01:08 UTC
*** Bug 1326637 has been marked as a duplicate of this bug. ***

Comment 14 errata-xmlrpc 2016-11-04 08:33:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2560.html